{"ip":"186.170.75.186","total_events":192,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":null,"why":["192 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range.","Sent 39,671 bytes despite few ports and no known exploit path: focused interaction with one service, worth a look."],"engagement":{"level":"payload","label":"Sustained payload","detail":"39,671 bytes sent","bytes_sent":39671,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-17T20:25:05","last_seen":"2026-08-19T02:03:00","events_24h":0,"events_7d":192,"geo":{"country_code":"CO","country_name":"Colombia","region":"Tolima Department","city":"Ibague","lat":4.4337,"lon":-75.2374,"asn":3816,"org":"COLOMBIA TELECOMUNICACIONES S.A. ESP BIC"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":39131,"proto":"tcp","label":"","count":192}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-08-17","count":47},{"date":"2026-08-18","count":67},{"date":"2026-08-19","count":78}],"recent_events":[{"timestamp":"2026-08-19T02:03:00","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-G2hb!DPwC4KS","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d473268622144507743344b53","method":"","user_agent":"","ja3":"","session":"1e739a8c-41af-42be-b549-08237317544a","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"213905c21ec3dbae","strings":["BitTorrent protocol","<-UW1605-G2hb!DPwC4KS"]}},{"timestamp":"2026-08-19T02:00:45","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"͊2�O���W�7�XW��9i,��V-z\u000er@���Pq<�C\u001d��Sš���O��a�SVO�_޸��b#��\u0004F/��X�*`��9V\u000f�eQ��y֥�+ǥ\u0003�ݖ��:�f��3���P�ާQ^[�4\n\".�>��I�fL���\u0001�\tN�\u000e\f��·\u0017�)\\��~\u001cu�\u0016@#��Z]�\u0018�\u0010\u0017�\u001cs>��\n\\�~:����vY~茷�R�Lu\u0001cᤏ�\u0001��j��)�\u001d��\u001f���\u001fd��Hm\b)W\u0002\u000b�,ۑz$\u0004\u0017f�$^�͂�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"799c53ab-cf0d-4995-94af-728493854bce","seq":1,"duration_ms":100,"bytes_in":370,"bytes_out":14,"enriched":{"digest":"ffa6bf26dbb97721","strings":["K=dH}","@|>SVO"]}},{"timestamp":"2026-08-19T01:58:14","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-hcYzVLVaoePq","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d6863597a564c56616f655071","method":"","user_agent":"","ja3":"","session":"5f19c245-caa3-4f6c-b8f1-9ac8cfdab2dc","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"928ddfda80db1168","strings":["BitTorrent protocol","<-UW1605-hcYzVLVaoePq"]}},{"timestamp":"2026-08-19T01:55:58","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"������)�@\u0013�G��5\u0014\\w\u0006\u000bJ�\f٫�R��jU�\u0007��\u0010!\u001eޭ��!\u0005���ZY{D\u0001�o�u�%\u0018z�\u001f����o�v7�b�:\u000e%�Z�n�ˆb����ӥ�q�\u000bDJ�t�-� ��[�;�B����g��;�\u000bG��\u0018 \b\bU �]�\u000e\u0012\u001a�7b��\u001c���R��\u0015;w�\u000fv�����[.f8v\u001e�?���\n�x�-q0�Za\u0014��!��d���C�\u0017�2���n9��V��9�8�\u001dg\u0005����b)\u0003���G�h���ՠ�\u000bQ�e�2[�\u00020S�jed\u0013\u001aD����~\u000e�\u000e�d��\f��t���\u0017���#���ߡmty�\u0004��Z̠��9\u000b�I�\u0002�\u000fz�����,�uF��ޱ\u001eg�?\b��3� �heVtS\u0016�V�\u001d�����,���%��,��\u0017��|B_/!By2lc\u0000��$�;n1�j�i\"�\u0010�\tW�\u001f�%�w\u0007�4�","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"442896a4-5324-46f1-85ff-431470ca5f63","seq":1,"duration_ms":100,"bytes_in":391,"bytes_out":14,"enriched":{"digest":"d2a4a8c96d6e6c0e","strings":["ZY{D","[.f8v","heVtS","|B_/!By2lc"]}},{"timestamp":"2026-08-19T01:53:26","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-)sbyN5afNP_L","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d297362794e3561664e505f4c","method":"","user_agent":"","ja3":"","session":"4b267463-fbd8-41b4-8e73-3b1416a83e71","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"b9bbcf0cfe7692b1","strings":["BitTorrent protocol","<-UW1605-)sbyN5afNP_L"]}},{"timestamp":"2026-08-19T01:43:04","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u001e8,j�\u001f\u001a��\u0018\u0007J]8Ug\u000f \u001ctĆ��\u0017�\u0010�3n�\\\u000e�\u000b\\��.\u0001g\"\u0001�E��l��\"\"�]|�\u0004��\u001d9�\u0017\u0007\u0001\u001c.�\u0001\u001a[�C�nף7�H5\u0002�\u001bsȧ�\u0016��y�\u0013�m/��\u000b�>C?�ƍ\u0017��9�\u0010:���߇\u0003+$c��\u0011��JN�u\u0014�\t���V�h�u�HM��\fCŤ�9K&�i ��Ϣ�H� ���\u0019�f]ӄ�����yU�Y3�\u000e�\u0004�h\u001au\u001bT\b��2\u0002�{b0�|\nB\"\tӒ\b��\u0013\u0011\"����\u001an7Y\u000e�y��!~��h\u0001әCm;<\u0016\u0004C4q+��׌\u0017\u001e\u0003J�HT4��\u0018�\u0004vq5ٻ��%~]��P\u0010I�{","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"1771eb3b-0412-40f8-953a-61b7bb76fdc7","seq":1,"duration_ms":100,"bytes_in":285,"bytes_out":14,"enriched":{"digest":"6e40aac3c9da1441","strings":["J]8Ug","Cm;<","C4q+"]}},{"timestamp":"2026-08-19T01:41:33","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b�R\u001f�ƸN�\u0011�Y�q\u0017|O�<-UW1605-B70y4n0tbvA1","payload_hex":"13426974546f7272656e742070726f746f636f6c00000000001800051bba521fdbc6b84ea3119a59eb71177f7c4fbc3c2d5557313630352d42373079346e307462764131","method":"","user_agent":"","ja3":"","session":"4ed34f02-68d1-4e25-8f60-985428358f56","seq":1,"duration_ms":100,"bytes_in":68,"bytes_out":14,"enriched":{"digest":"6fa4bb1a1b013af5","strings":["BitTorrent protocol","<-UW1605-B70y4n0tbvA1"]}},{"timestamp":"2026-08-19T01:40:20","port":39131,"proto":"tcp","app_proto":"","app_protocol":"bittorrent","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u00017a�dP\u001crL��,͝\u001f�lY�P��L\u000b\u0005l2/�\u0005�@ɹE��\\�[���@a�؏�UN�tp�\fk\u0017}@\u0007�Dno�d\u0001J�\u001dsE\u0011�:`M\u001d)f��7\u0007�5!\u0010�19nC��Bl�\u0004a\u0016\\��Sp�-��%\u00071G�b��`_\u0000\u000b\u001d v���\u001f)�-�_Mz���Ӧ1�\u000b�Hv�p��G�x�v;�>�;}9���\rlk\u0018��\u001f���;a�\u0014���,$3\"�0h�)\u0018�mϏ�@R���M\u0002~����\r\u0013�1\n~\u0019�)C�%�ԌΧ�AX0\u0010�>��&u�r\u0016NJ�4\u0005r�2KO�\u0005\u0017U=ƚ:F���zL��\b�p��\u000bQ�\u0018�Mf��i���?\u0011�ۦ�\nb�K/��=\u001c�C������u^T=ٛ'4\u00160��*(������kzQ7���M��A<�h,\u001c\f��#\u001cP��z�����~0��-\"�gp5�d^�C�9T�\u000f\u0004��\u0010���kFH�TN�\u0016}��\u0012n�/�D�?K�\u001c>��mQHU�?\u0010�)E�|��-�Qڪ=�ª�n:\u0014\u0000�\u0006L�ZH����K��൱��;d�����>H��za\u001c��]����\u001aIL,=8Q�\u0004��\u0013�3�j\u0003�3���a���\u0006�%p�چ\u0018�Ƕ#\t\u0003�P\u001b_p{[��.B��\u0003/\u001eL�K�(&�&��P+/�;�I�=��H���i}���#\u0012�E��}���_[��\f���'=?\u0018O���+���R�3X�&ss8�\t������xbg��-��{�\u0013��c\u0010zJ\n�\u0007\u001f~�B�o��N�3���k�[\u0014�\n@�\f�x�\u001e��9+N���\u001b�\u00058�ۉ�����=�Y��\u001f��q�9B7\u0018�\u001c�G��jՙ�0Q�\u0016�\u0003����\u001b�|���\u0010\u0010e簮=|m�n���q⼾�`�\u000f�\u0019��EU\u000e64�V�n̞��:�<���{|�Y\u0013O\u0002r�\r�\u001e�\u001d5\u001e���c�zO\u0014\u000f���*e��e}�\u0001W,�@5˽R�G�Y�k\u0018z2\b5\u001fqh�M2��ճDy\f^8�e�\\zL\u00063.O:\u000bp��lߐcO�\\zȺ\u0007��[CQ��@w���Z%j\u001a\u0013����c\b�����5�\u001f�-f_��������\u0006�$o�\u0004�j�\u0016�����","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"28816e0b-8d7e-47f7-bd64-4daf3d02b93e","seq":1,"duration_ms":100,"bytes_in":464,"bytes_out":14,"enriched":{"digest":"e69c318c12fd430a","strings":["O>za","IL,=8Q","_p{[","&ss8","3.O:"]}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-20T21:22:35.980680+00:00"}